Daily updates from Odoo
Thursday, July 17, 2025
1 change
Security fixes and vulnerability patches
Websocket messages sent to IoT Boxes are now signed with a database-generated token to confirm they come from a valid Odoo user. This strengthens trust in IoT communications and helps prevent unauthorized messages from reaching connected devices.
Original PR description
As websocket messages to IoT Boxes are sent from the Odoo client, we need to ensure it is sent from a valid user. We then sign using the database generated token (same as longpolling requests). Community PR: odoo/odoo#218139 Task: 4933216 Forward-Port-Of: odoo/enterprise#89849